General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 333 Views
  • 0 replies
  • 2 Likes

Resolved! Palo Alto Firewall

I am planning to setup the LAB environment where I want to run Palo Alto firewall. I am looking for latest version image. How can I get the image? Also need help on steps to achieve it. Thanks!

DHCP Relay

I have a strange intermittent problem with DHCP relay.  I have it setup on all our firewalls, PA-220, and they relay to servers in the data center (Windows 2016).  At some point the relay stops sending offers.  I can see the discovery packet and no o

...

bschaper by L2 Linker
  • 4414 Views
  • 7 replies
  • 0 Likes

Syslog Custom Format for Splunk

I'm trying to get the firewall to send before and after change detail to splunk. I've tried various formats in Custom Log Format, but any changes I make result in no logs being sent to splunk. What is the correct format for Custom Log Format when usi

...

connection issue about security-client

as doc descibe , Cloud connection should be connected 

 

 

admin@paloalto-vm-10.1.9> show ctd-agent status security-client

Security Client Dlp(0)
Current cloud server: dlp.hawkeye.services-edge.paloaltonetworks.com:443
Cloud connection: disconnected
Con

...

Resolved! Convert management-only Panorama to panorama-mode

So I've added a 2048 GB disk:

 

admin@panorama> show system disk details

Name : vdb
State : Present
Size : 2097152 MB
Status : Available
Reason : Admin enabled

 

When trying to switch system mode, this happens:


admin@panorama> request system system-mode

...

For AD user password reset option

We have seen that whenever a domain password is  going to expire for the SSL VPN user, the Global Protect client on the user's system starts flashing a message that the password will expire soon. We want to know if there is any possibility to embed a
...

SurajN by L2 Linker
  • 3132 Views
  • 4 replies
  • 0 Likes

Log forwarding - Filtering and Auto- tag not working

Hi there,

 

I had setup Log forwarding profile, where I am sending All logs to syslog server. Thats working great.

 

Then I added one more line where I am filtering threat logs for (severity eq critical) and (zone.src eq internet_zone)

 

Checking f

...

LogForwarding.png
MatchingList.png
filter.png
Action.png

Nested Device Logging

Hello, 

 

We have set up some nested device groups, to allow for easier policy management and, as expected, when viewing traffic in Panorama we see the logs for both device groups in the parent device group and only child device group logs in the chi

...

Firewall is not forwarding logs to the Syslog server

Hi everyone! 

 

I am kind of bummed on why my syslog configuration is not taking effect.

 

I have 2 pairs of firewall, PRD(2 firewalls) and DR(2 firewalls). Both are in HA setup and managed by Panorama. My syslog configuration in DR and PRD are just

...

Multicast - troubleshooting

Any tips/advice how to test multicast? Should I be able to do a ping from a firewall interface included in the Interface Group to a multicast address as a test?

 

Also from Runtime Stats on the VR, I do not see anything showing under the Multicast ->

...

clewis1_0-1724153163868.png
clewis1 by L3 Networker
  • 335 Views
  • 1 replies
  • 0 Likes

Resolved! Roll Back GlobalProtect

Does palo seriously not provide a way to roll back GlobalProtect?  TAC told me there is no documentation on how to do that. 

PANOS upgrade plan in excel sheet for a year

Hello Experts, 

 

 I have been asked to provide a plan to upgrade Palo Alto firewalls within a year and I have almost 430 Palos in the environment. I need help creating a sample plan with timelines and what columns I should use in this plan. If someo

...

p.mohan by L1 Bithead
  • 605 Views
  • 4 replies
  • 0 Likes
  • 23670 Posts
  • 108 Subscriptions
Top Liked Authors
Labels